Local by default
Captures, recordings, editing, text recognition and History live on your device.
Cloud by choice
Translation and sharing use services you configure, and actions you start.
Always your work
No required Capto account, no product telemetry, no automatic capture uploads.
The details
Captured pixels, recordings, Library entries, recognised text and settings stay local. Translation and sharing happen only when you invoke them. Connected AI providers may be contacted to verify access, refresh models and show provider-reported usage while you manage them. Update checks are automatic, and uncached OCR assets may download when needed.
What stays on the device
| Data | Where it lives |
|---|---|
| Captures and recordings | On your PC, in the folders you choose, with app data under %APPDATA%\Capto. |
| Library and settings | Under %APPDATA%\Capto, for as long as your History retention allows. |
| Text recognition | Runs on-device with Tesseract, in English plus your configured primary OCR language. On first use or a cache miss, its worker, core or language files may download from jsDelivr. |
| Diagnostic logs | Optional and off by default. When enabled, written locally only. |
Secrets
Translation API keys, plan keys and cloud credentials are encrypted with Windows DPAPI and scoped to your Windows user account. Provider sign-ins run through the provider’s supported authorisation flow, so passwords never enter Capto. The provider-owned account grant stays in an isolated Capto session directory, separate from your other apps. Disconnecting removes Capto’s grant without signing you out of the provider everywhere else.
Services that can use the network
| Service | What happens |
|---|---|
| Cloud share | Opt-in. Capto uploads to storage you configure (Cloudflare R2, Amazon S3, Tencent COS or Aliyun OSS), signing each request locally with your keys. Files live in your account, and stay there if you uninstall Capto. |
| Translation | Optional. The selected provider receives only the text you explicitly ask to translate. |
| Automation URLs | The capto:// scheme is disabled until you enable it. While it is off, no other app can trigger a capture. |
| Updates | Capto checks trycapto.app for signed release metadata at startup and every 30 minutes. No capture content is included. The installer downloads only when you start it from All-in-One or Settings. |
| This website | Static pages with no cookies and no analytics. Inter is self-hosted; keycaps and code use your system’s monospace fonts. No Google Fonts request is made. |
Translation providers
Capto includes 26 provider presets:
- OpenAI and Azure OpenAI
- xAI (Grok), Anthropic Claude, Google Gemini and Mistral AI
- MiniMax, Alibaba Qwen, Moonshot AI (Kimi), Zhipu GLM (Z.AI) and Baidu Qianfan
- Tencent Hunyuan TokenHub and Tencent TokenHub Enterprise Plan
- SiliconFlow, StepFun API, StepFun Step Plan and DeepSeek
- Perplexity, OpenRouter, Groq and Together AI
- DeepL and Google Cloud Translation
- Local Ollama and a custom OpenAI-compatible endpoint
- GitHub Copilot
ChatGPT, Grok and GitHub Copilot use supported provider account flows; OpenRouter supports OAuth or an API key. Other presets use only the API key, plan key, region or local endpoint shown for that provider. Capto does not imply that every provider offers OAuth.